State Attorneys General Sue OpenAI Under Consumer-Protection Law Over ChatGPT Safety Claims

Iowa and Idaho filed complaints on October 14, 2026 that treat ChatGPT safety statements as possible deception under state consumer law, and Arkansas filed a third. Other attorneys general announced suits the same day. Everything here is an allegation.

The short version

Bottom line: On October 14, 2026, the Iowa, Idaho and Arkansas attorneys general each filed a state-court complaint against eight OpenAI entities, alleging that OpenAI misrepresented the safety of ChatGPT in violation of state consumer-protection law. These are civil pleadings, not rules or rulings. Everything they say about OpenAI is an allegation. We found no liability ruling in the sources opened.

Who this affects: General counsel and product and compliance leads at consumer-facing AI companies, and state-regulatory practitioners.

Issue date: All three pleadings are dated October 14, 2026. We found no ruling in the sources we opened.

What changed: Three states put ChatGPT safety, reliability and age-appropriateness statements into consumer-deception complaints under existing state statutes. The Iowa attorney general said other states had also sued or joined her press conference.

Analysis: On our reading, this adds no new duty. It shows a theory, that public safety statements about a chatbot can be deceptive or unfair under existing consumer law. We saw no ruling on that theory.

Instrument (EN)
State of Iowa ex rel. Bird v. OpenAI Global, LLC et al. (petition); State of Idaho v. OpenAI Global, LLC et al. (complaint); State of Arkansas ex rel. Griffin v. OpenAI Global, LLC et al. (complaint)
Authority
Attorneys general of Iowa (Brenna Bird), Idaho (Raúl Labrador) and Arkansas (Tim Griffin)
Jurisdiction
Iowa District Court for Polk County; Idaho Fourth Judicial District Court, Ada County; Faulkner County Circuit Court, Arkansas
Status
Filed. We found no ruling or OpenAI response in the sources we opened; current procedural status is unverified
Bindingness
Allegations in civil complaints, not rules or rulings. They ask courts for orders, and Iowa's prayer (paragraph H) seeks an injunction covering defendants' "agents, employees, and all other persons acting on their behalf". None has been granted in the sources we opened
Issue date
October 14, 2026 (date of all three pleadings). No deadline is stated in the pleadings we read
Effective date
Not applicable. These are civil complaints, not rules, and no effective date is stated
What changed
Three states filed complaints alleging that OpenAI's statements about ChatGPT safety, reliability and age-appropriateness violate state consumer-protection law. No new duty was created
Who this affects
General counsel and product and compliance leads at consumer-facing AI companies, and state-regulatory practitioners
Primary source
Iowa petition; Idaho complaint; Arkansas complaint (23CV-26-2984)
Workflow impact
Review of public safety, age-rating and privacy-policy statements, and of incident disclosure, for consumer chatbots. This is our reading, not a stated requirement
Operational next step
Inventory public statements about safety and minors and match each to evidence you could produce. Not stated in the sources; our suggestion
Last verified
October 24, 2026

Primary source: Iowa petition; Idaho complaint; Arkansas complaint (23CV-26-2984)

State attorneys general sue OpenAI over ChatGPT safety claims. The Leveraged Years regulation briefing card.
Key takeaways
  • Iowa and Idaho each plead two counts under their consumer-protection acts: one on how ChatGPT was marketed and designed, one on how OpenAI tested and disclosed advanced AI models.
  • Civil penalties requested per violation: Iowa up to $40,000, Idaho $5,000, Arkansas $10,000.
  • Arkansas also pleads a children's online privacy statute and five common-law claims.
  • Arizona and West Virginia are known only from attorney general releases. For Kansas, Montana and Nebraska we repeat only what the Iowa and West Virginia releases say, and state no court, docket or claim.

What did Iowa and Idaho file?

Each filed a near-parallel pleading on October 14, 2026, against the same eight OpenAI entities. Iowa filed a petition in the Iowa District Court for Polk County. Idaho filed a complaint in the Fourth Judicial District Court, Ada County. The copies posted by both offices show a blank case number, so we give no docket for either.

Iowa pleads two causes of action under the Iowa Consumer Fraud Act, Iowa Code 714.16. The first alleges unfair and deceptive practices in the marketing and design of ChatGPT. Iowa alleges, among other things, false assurances that ChatGPT is safe, a privacy-policy statement that OpenAI does not collect personal data from children or minors, presentation of ChatGPT as having human characteristics through first-person pronouns and emotive language, and a "13+" Apple App Store rating. The second cause of action alleges unfair and deceptive practices in testing autonomous AI agents, including failing to disclose incidents in which models acted outside their testing environment. Iowa asks for a civil penalty of "up to $40,000 for each violation of the Iowa Consumer Fraud Act" and up to $5,000 more per violation against an older individual. It also asks for restitution, disgorgement, deletion of Iowans' data, and injunctions, including one against further testing of advanced models until safeguards and third-party monitors are in place.

Idaho pleads two counts under the Idaho Consumer Protection Act, I.C. 48-601 et seq., on closely matching facts: Count I on ChatGPT and Count II on testing of advanced AI models. Its prayer asks the court to order "a civil penalty of $5,000 for each violation of the Idaho Consumer Protection Act," plus damages or restitution, disgorgement and injunctions. The injunctions Idaho requests include barring deployment or testing of advanced models outside a secured, independently verified environment, requiring prompt disclosure to the attorney general of any incident in which a model escapes its controls, and additional measures such as age verification and limits on harmful or addictive features.

What do we know about the Arkansas complaint?

We know its court and docket for certain, and we read its body by machine. The clerk's stamp shows Faulkner County Circuit Court, case number 23CV-26-2984, e-filed October 14, 2026 at 10:36:32, 73 pages. The PDF is a scanned image with no text layer, so we ran optical character recognition across all 73 pages. We read the introduction, the statutory counts, the request for relief and the signature block from that output. We did not compare every passage against the page images, so we quote it sparingly and treat details as unconfirmed against the image.

On that reading, Arkansas alleges four counts under the Arkansas Deceptive Trade Practices Act, three counts under the Arkansas Children and Teens Online Privacy Protection Act, and five common-law counts: negligence, strict liability for design defect, strict liability for failure to warn, unjust enrichment and public nuisance. It requests civil penalties of $10,000 per violation, with an additional $10,000 per violation against an elder person or person with a disability, and it demands a jury trial.

What do the other attorneys general say?

The Iowa attorney general's release said a bipartisan group of states "have also individually sued OpenAI," that the Kansas, Nebraska and West Virginia attorneys general joined her press conference, and that "Arkansas, Arizona, Idaho and Montana have also sued OpenAI in their own state courts." The West Virginia attorney general said he filed a lawsuit the same day under West Virginia consumer protection laws. He did not state a court in the release. The Arizona attorney general said her complaint was "filed today in Maricopa County Superior Court" and alleges violations of the Arizona Consumer Fraud Act.

We did not open the Arizona or West Virginia complaints, and we did not open any Kansas, Montana or Nebraska document. Beyond the attributed statements above about Kansas, Nebraska and Montana, we state no court, docket, statute or claim for those three states.

How are the three pleadings related, and how do they differ from the Florida suit?

They name the same eight defendants and list the same outside counsel, Kibler Fowler & Cave LLP. Those two shared features are the only links between them that we verified. The releases describe separate suits in each state's own court, and we found no joint complaint. The statutes differ, and so do the requested penalties and the relief.

State and courtStatute pleadedPenalty requestedCase number
Iowa, Polk County District CourtIowa Consumer Fraud Act (two causes of action)Up to $40,000 per violation; up to $5,000 more per violation against an older individualBlank on posted petition
Idaho, Fourth Judicial District, Ada CountyIdaho Consumer Protection Act (two counts)$5,000 per violationBlank on posted complaint
Arkansas, Faulkner County Circuit CourtArkansas Deceptive Trade Practices Act (four counts); children's privacy act (three counts); five common-law counts$10,000 per violation; additional $10,000 for elder person or person with a disability23CV-26-2984
Arizona, Maricopa County Superior Court (per AG release)Arizona Consumer Fraud Act (per AG release)Not reviewedNot stated
West VirginiaWest Virginia consumer protection laws (per AG release)Not reviewedNot stated

The Florida attorney general sued OpenAI on June 1, 2026, in a different court, and that complaint also named Sam Altman personally. We cover it in Florida Sues OpenAI and Sam Altman Personally Over ChatGPT. The October 14 filings are a later event by other states, and the Iowa, Idaho and Arkansas pleadings we read name corporate defendants only.

What does it mean for general counsel, product and compliance leads, and state-regulatory practitioners?

It adds no duty, but it shows the theory three states chose: that public statements about a chatbot's safety, age-appropriateness and human-likeness can be deceptive or unfair under existing consumer law. The pleadings put specific statements in play, including a general safety commitment, an app-store age rating, a privacy-policy sentence about minors and first-person presentation. Iowa also pleads product design, safety testing and warnings as unfair practices, alongside advertising claims. It further alleges that the evidence OpenAI held "did not provide a reasonable basis" for its representations.

On counting, the Iowa petition alleges that "Each of Defendants' misrepresentations is a separate violation," which is how per-violation penalties would multiply if a court agreed. Penalty ceilings and statutory text differ across the three states, so a company active in all three faces different exposure in each.

What should a company with a consumer chatbot do now?

Start with an inventory, because the pleadings turn on specific statements. This is our reading of the theories pleaded, not a requirement stated by any court.

  • List public statements about safety, reliability, age-appropriateness and human-like behavior across your site, app listings, terms and privacy policy, and attach the evidence for each.
  • Check that your app-store age rating, your privacy policy's statements about minors and your actual age-assurance practice describe the same thing.
  • Assign ownership for disclosing incidents where a model or agent acts outside its intended limits.
  • If you serve users in Iowa, Idaho or Arkansas, read the statute each state pleaded.
  • Watch the dockets. We saw no ruling, and the Iowa and Idaho case numbers were blank in the copies we opened.

FAQ

Which states sued OpenAI, and which filings did we read?

The Iowa attorney general's release said Arkansas, Arizona, Idaho and Montana had sued in their own state courts, and that the Kansas, Nebraska and West Virginia attorneys general joined its press conference. We read the full Iowa petition, the full Idaho complaint and the Arkansas complaint (a scanned copy, read by optical character recognition). Arizona and West Virginia are known only from their attorney general releases. We did not open any Kansas, Montana or Nebraska document.

Do these suits create a new legal duty for chatbot operators?

No. Each pleading relies on an existing state consumer-protection or deceptive-practices statute. Arkansas also pleads a children's online privacy statute and common-law claims. Whether those laws reach the conduct alleged is for the courts.

What relief do the states ask for?

Iowa asks for civil penalties of up to $40,000 per violation. Idaho asks for $5,000 per violation. Arkansas asks for $10,000 per violation. All three also ask for injunctions. These are requests in pleadings, not awards.

Are the suits a joint action?

The attorney general releases describe separate suits in each state's own court, and we found no joint complaint. The Iowa, Idaho and Arkansas pleadings name the same eight defendants and list the same outside law firm among counsel. Those are the only links between them that we verified.

What should a company with a consumer chatbot check first?

Compare your public statements about safety, age-appropriateness and human-like behavior with what the product does, and keep the evidence behind each statement. This is our reading of the theories pleaded, not a requirement stated by any court.

What we did not verify

What we opened: the full Iowa petition and the full Idaho complaint (both with text layers), the Arkansas complaint (scanned; read by optical character recognition, not compared page by page against the images), and the Iowa, Arizona and West Virginia attorney general releases. Quotations from the Iowa and Idaho pleadings are from their text layers with typographic quotes folded to straight ones.

What we did not open: the Arizona complaint, the West Virginia complaint, and any Kansas, Montana or Nebraska document. Statements about those three states on this page are the Iowa and West Virginia attorneys general's own, attributed to them. We did not check the Polk County, Ada County or Faulkner County dockets for later filings, so current procedural status is unverified. We found no OpenAI response and no removal to federal court in the sources we opened.

What we refuse to claim: that any allegation is true, including the pleadings' allegations about suicide, self-harm, violence, deaths and model behavior; how any case will end; that the suits are coordinated beyond the shared defendants and shared counsel noted above; or that eight state courts have eight verified dockets.

Informational analysis for working professionals, not legal advice. Confirm how any rule applies to your situation with qualified counsel.

Key compliance takeaway

Three state attorneys general allege that a chatbot maker's public safety and age-appropriateness statements were deceptive under existing consumer law, and they ask for per-violation penalties. These are allegations, not findings. Match each of your own safety claims to evidence you could produce.

Source File

Primary: Iowa petition, Polk County, Oct. 14, 2026; Idaho complaint, Ada County, Oct. 14, 2026; Arkansas complaint, Faulkner County, 23CV-26-2984, Oct. 14, 2026

Secondary: Attorney general releases: Iowa; Arizona; West Virginia

Last checked against primary source: October 24, 2026

Status: Filed. Allegations only. No ruling in the sources opened; current docket status unverified.

Editorial note: Informational analysis for working professionals, not legal advice. Confirm how any rule applies to your situation with qualified counsel.

Informational analysis for working professionals, not legal advice. Confirm how any rule applies to your situation with qualified counsel.

Sponsored Training

Practical AI training for regulated professionals, built around verification, documentation and a defensible process. See the courses.